deps: bump the rust-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #859 · nearai/cloud-api

dependabot · 2026-07-01T19:13:10Z

Bumps the rust-dependencies group with 8 updates in the / directory:

Package	From	To
anyhow	`1.0.102`	`1.0.103`
uuid	`1.23.3`	`1.23.4`
axum-test	`20.1.0`	`21.0.0`
chacha20poly1305	`0.10.1`	`0.11.0`
getrandom	`0.4.1`	`0.4.3`
rmcp	`1.8.0`	`2.0.0`
aes-gcm	`0.10.3`	`0.11.0`
mockall	`0.14.0`	`0.15.0`

Updates anyhow from 1.0.102 to 1.0.103

Release notes

Sourced from anyhow's releases.

1.0.103

Fix Stacked Borrows violation (UB) in Error::downcast_mut (#451, #452)

Commits

5bdb0e2 Release 1.0.103
e621bd3 Merge pull request #452 from dtolnay/downcast
6e8c000 Eliminate pointer->reference->pointer during downcast
67c4abd Add regression test for issue 451
917a169 Update actions/upload-artifact@v6 -> v7
d9dc3fa Update actions/checkout@v6 -> v7
841522b Raise minimum tested compiler to rust 1.85
See full diff in compare view

Updates uuid from 1.23.3 to 1.23.4

Release notes

Sourced from uuid's releases.

v1.23.4

What's Changed

Fix up name of fuzz script in readme by @KodrAus in uuid-rs/uuid#888

document fixes by @frostyplanet in uuid-rs/uuid#889

Prepare for 1.23.4 release by @KodrAus in uuid-rs/uuid#890

New Contributors

@frostyplanet made their first contribution in uuid-rs/uuid#889

Full Changelog: uuid-rs/uuid@v1.23.3...v1.23.4

Commits

3296d64 Merge pull request #890 from uuid-rs/cargo/v1.23.4
cba53d0 prepare for 1.23.4 release
e347af4 Merge pull request #889 from frostyplanet/main
e9bf55c doc: Fix broken link warnings
5351af4 doc: Enable feature flag label for docs.rs
1e6a966 Merge pull request #888 from uuid-rs/KodrAus-patch-1
c9619f6 fix up name of fuzz script in readme
See full diff in compare view

Updates axum-test from 20.1.0 to 21.0.0

Commits

See full diff in compare view

Updates chacha20poly1305 from 0.10.1 to 0.11.0

Commits

e37a978 chacha20poly1305 v0.11.0 (#853)
a10b56f aes-gcm v0.11.0 (#852)
f042e9c aead-stream v0.6.0 (#851)
b29735a Adopt Trusted Publishing (#854)
a1fe43f xaes-256-gcm: enable and fix workspace level lints (#850)
8cf876f eax: remove toplevel lint attributes (#849)
4661ddf ocb3: enable and fix workspace-level lints (#848)
c821431 eax: enable and fix workspace-level lints (#847)
d3684bb deoxys: enable and fix workspace-level lints (#846)
5e016e2 chacha20poly1305: enable and fix workspace-level lints (#845)
Additional commits viewable in compare view

Updates getrandom from 0.4.1 to 0.4.3

Changelog

Sourced from getrandom's changelog.

0.4.3 - 2026-06-17

Added

wasm64-unknown-unknown target support for wasm_js backend #848

Changed

Drop wasip2 and wasip3 dependencies in favor of manual bindings #830

#830: rust-random/getrandom#830 #848: rust-random/getrandom#848

0.4.2 - 2026-03-03

Changed

Bump r-efi dependency to v6 #814

Fixed

Read errno only when it is set #810

Check the return value of ProcessPrng on Windows #811

#810: rust-random/getrandom#810 #811: rust-random/getrandom#811 #814: rust-random/getrandom#814

Commits

5e7cd57 Release v0.4.3 (#853)
1ea268a Use manual bindings for WASIp2/3 (#830)
f7290b0 Update Cargo.lock (#852)
16ce801 Update Cargo.lock (#850)
e5adfca Add wasm64-unknown-unknown support for wasm_js backend (#848)
626df8d Update Cargo.lock (#846)
4a01cb2 Update Cargo.lock (#841)
f87bf39 Update Cargo.lock (#836)
eadb879 ci: re-enable build job for x86_64-pc-cygwin (#832)
d715d73 CI: Reduce the number of packages that are updated for wasip2 MSRV test (#825)
Additional commits viewable in compare view

Updates rmcp from 1.8.0 to 2.0.0

Release notes

Sourced from rmcp's releases.

rmcp-macros-v2.0.0

Added

[breaking] align model types with MCP 2025-11-25 spec (#927)

Fixed

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

align README examples with v2 model API (#928)

rmcp-v2.0.0

Added

[breaking] (rmcp) add Audio variant to PromptMessageContent (#865)

[breaking] align model types with MCP 2025-11-25 spec (#927)

deprecate roots/sampling/logging types (#923)

Fixed

prevent OAuth resource spoofing (#937)

block oauth metadata ssrf (#935)

prevent streamable HTTP session leak (#934)

fill missing fully qualified syntax in prompt_handler macros (#866)

Other

consolidate repeated rmcp tests (#931)

align README examples with v2 model API (#928)

Commits

67a3085 chore: release v2.0.0 (#920)
c1a8b29 fix: prevent OAuth resource spoofing (#937)
eb435c6 fix: block oauth metadata ssrf (#935)
dfa7fd6 fix: prevent streamable HTTP session leak (#934)
e1af378 chore: consolidate repeated rmcp tests (#931)
4b9bea7 Revert "feat!: relax tool result structuredContent type (#919)" (#932)
b8a936c feat!: relax tool result structuredContent type (#919)
4158528 fix: fill missing fully qualified syntax in prompt_handler macros (#866)
d1cabb4 feat: deprecate roots/sampling/logging types (#923)
f07ee4a docs: align README examples with v2 model API (#928)
Additional commits viewable in compare view

Updates aes-gcm from 0.10.3 to 0.11.0

Commits

a10b56f aes-gcm v0.11.0 (#852)
f042e9c aead-stream v0.6.0 (#851)
b29735a Adopt Trusted Publishing (#854)
a1fe43f xaes-256-gcm: enable and fix workspace level lints (#850)
8cf876f eax: remove toplevel lint attributes (#849)
4661ddf ocb3: enable and fix workspace-level lints (#848)
c821431 eax: enable and fix workspace-level lints (#847)
d3684bb deoxys: enable and fix workspace-level lints (#846)
5e016e2 chacha20poly1305: enable and fix workspace-level lints (#845)
b3524d3 ccm: enable and fix workspace-level lints (#844)
Additional commits viewable in compare view

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

Compatibility with the #[auto_impl] macro. (#686)

Commits

fc2c853 chore: Release
551fadd Merge pull request #688 from asomers/audit-job-lockfile
21529e3 Fix the audit CI job
2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
d3b041d Add compatibility with the #[auto_impl] macro
055886e Merge pull request #687 from asomers/clippy-june-2026
ed4bf07 Clippy cleanup
f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
ba15180 Clippy cleanup: useless_borrows_in_formatting
de22d57 Merge pull request #684 from asomers/github-workflows
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyhow](https://github.com/dtolnay/anyhow) | `1.0.102` | `1.0.103` | | [uuid](https://github.com/uuid-rs/uuid) | `1.23.3` | `1.23.4` | | [axum-test](https://github.com/JosephLenton/axum-test) | `20.1.0` | `21.0.0` | | [chacha20poly1305](https://github.com/RustCrypto/AEADs) | `0.10.1` | `0.11.0` | | [getrandom](https://github.com/rust-random/getrandom) | `0.4.1` | `0.4.3` | | [rmcp](https://github.com/modelcontextprotocol/rust-sdk) | `1.8.0` | `2.0.0` | | [aes-gcm](https://github.com/RustCrypto/AEADs) | `0.10.3` | `0.11.0` | | [mockall](https://github.com/asomers/mockall) | `0.14.0` | `0.15.0` | Updates `anyhow` from 1.0.102 to 1.0.103 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](dtolnay/anyhow@1.0.102...1.0.103) Updates `uuid` from 1.23.3 to 1.23.4 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](uuid-rs/uuid@v1.23.3...v1.23.4) Updates `axum-test` from 20.1.0 to 21.0.0 - [Release notes](https://github.com/JosephLenton/axum-test/releases) - [Commits](https://github.com/JosephLenton/axum-test/commits) Updates `chacha20poly1305` from 0.10.1 to 0.11.0 - [Commits](RustCrypto/AEADs@chacha20poly1305-v0.10.1...chacha20poly1305-v0.11.0) Updates `getrandom` from 0.4.1 to 0.4.3 - [Changelog](https://github.com/rust-random/getrandom/blob/master/CHANGELOG.md) - [Commits](rust-random/getrandom@v0.4.1...v0.4.3) Updates `rmcp` from 1.8.0 to 2.0.0 - [Release notes](https://github.com/modelcontextprotocol/rust-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/rust-sdk/blob/main/release-plz.toml) - [Commits](modelcontextprotocol/rust-sdk@rmcp-v1.8.0...rmcp-v2.0.0) Updates `aes-gcm` from 0.10.3 to 0.11.0 - [Commits](RustCrypto/AEADs@aes-gcm-v0.10.3...aes-gcm-v0.11.0) Updates `mockall` from 0.14.0 to 0.15.0 - [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md) - [Commits](asomers/mockall@v0.14.0...v0.15.0) --- updated-dependencies: - dependency-name: anyhow dependency-version: 1.0.103 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: uuid dependency-version: 1.23.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: axum-test dependency-version: 21.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: chacha20poly1305 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: getrandom dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust-dependencies - dependency-name: rmcp dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: rust-dependencies - dependency-name: aes-gcm dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies - dependency-name: mockall dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: rust-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-01T19:23:51Z

✅ OpenCodeReview: Some files could not be reviewed due to errors.

dependabot · 2026-07-03T18:46:02Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 1, 2026

dependabot Bot had a problem deploying to Cloud API test env July 1, 2026 19:13 Failure

dependabot Bot closed this Jul 3, 2026

dependabot Bot deleted the dependabot/cargo/rust-dependencies-fb7b1be71a branch July 3, 2026 18:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the rust-dependencies group across 1 directory with 8 updates#859

deps: bump the rust-dependencies group across 1 directory with 8 updates#859
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-fb7b1be71a

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.103

v1.23.4

What's Changed

New Contributors

0.4.3 - 2026-06-17

Added

Changed

0.4.2 - 2026-03-03

Changed

Fixed

rmcp-macros-v2.0.0

Added

Fixed

Other

rmcp-v2.0.0

Added

Fixed

Other

[ 0.15.0 ] - 2026-06-28

Added

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 1, 2026 •

edited

Loading